Skip to content

Commit 4a696b3

Browse files
committed
Update s3 documentation cacert setting
This patch updates the s3 backend README to point out that the glance-operator is now able to automatically set the cert path in the glance config, unless an override is present. Signed-off-by: Francesco Pantano <fpantano@redhat.com>
1 parent e055aba commit 4a696b3

1 file changed

Lines changed: 5 additions & 4 deletions

File tree

config/samples/backends/README.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -439,11 +439,12 @@ spec:
439439
```
440440

441441
**Note:**
442-
If s3 is consumed via `https`, the option `s3_store_cacert` must be set, pointing
443-
to the `ca-bundle.crt` path.
442+
If s3 is consumed via `https`, the option `s3_store_cacert` is automatically set by
443+
the glance-operator, and it points to the `ca-bundle.crt` path.
444444
The `OpenStackControlPlane` is usually deployed by default with tls enabled,
445445
and a CA certificate is mounted to the Pod in `/etc/pki/tls/certs/ca-bundle.crt`.
446-
GlanceAPI `customServiceConfig` must be updated to reflect the following:
446+
However, in case a custom certificate (mounted to Pod) is required, GlanceAPI
447+
`customServiceConfig` must be updated to reflect the following:
447448

448449
```
449450
customServiceConfig: |
@@ -455,7 +456,7 @@ customServiceConfig: |
455456
[default_backend]
456457
s3_store_create_bucket_on_put = True
457458
s3_store_bucket_url_format = "path"
458-
s3_store_cacert = "/etc/pki/tls/certs/ca-bundle.crt"
459+
s3_store_cacert = "<path/to/the/custom/cert>"
459460
```
460461

461462
If you are using `install_yamls` and you already have `crc` running you

0 commit comments

Comments
 (0)